Login Request a demo
MI
Vendor
misp
11 products with CVEs on record
175
CVEs
0
On KEV
37
New 30D
Products
MI
misp
misp
10.0
142 CVEs0 on KEV31 new
MI
misp-guard
MISP
7.7
3 CVEs0 on KEV3 new
MI
MISP
MISP
6.9
1 CVEs0 on KEV1 new
MI
misp-modules
MISP
6.3
1 CVEs0 on KEV1 new
SA
sachertortephp
MISP
8.4
1 CVEs0 on KEV1 new
CT
cti-transmute
misp
8.8
16 CVEs0 on KEV0 new
MI
misp-modules
misp
9.3
4 CVEs0 on KEV0 new
MI
misp-stix
misp
8.8
4 CVEs0 on KEV0 new
BS
bsimvis
misp
6.9
1 CVEs0 on KEV0 new
MI
Misp-maltego
Misp
9.8
1 CVEs0 on KEV0 new
SA
sachertortephp
misp
5.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-118173
New
MI
misp-guard
MISP
6.1–Oct 27MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement
CVE-2026-116469
New
MI
misp-guard
MISP
7.1
0%
Oct 26MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding
CVE-2026-116372
New
MI
misp-guard
MISP
7.7
0%
Oct 26MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules
CVE-2026-112991
MI
misp-modules
MISP
6.3
0%
Oct 19MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()
CVE-2026-112192
MI
MISP
MISP
5.3
0%
Oct 19MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings
CVE-2026-112188
MI
MISP
MISP
7.1
0%
Oct 19MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution
CVE-2026-112184
MI
MISP
MISP
4.8
0%
Oct 19MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parameter Names in Form Labels
CVE-2026-112183
MI
MISP
MISP
4.8
0%
Oct 19MISP CSS Injection via Remote Tag Colour in Event Preview
CVE-2026-112180
MI
MISP
MISP
5.1
0%
Oct 19MISP Incomplete Event Deletion Leaves Orphaned Sensitive Records
CVE-2026-112179
MI
MISP
MISP
5.3
0%
Oct 19MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instances
CVE-2026-112178
MI
MISP
MISP
7.1
0%
Oct 19MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shadow Attribute Access Control
CVE-2026-107278
MI
MISP
MISP
5.3
0%
Oct 7MISP Object Sync Drops Objects and Attributes When Description Is Empty
CVE-2026-107276
MI
MISP
MISP
6.3
0%
Oct 7MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests
CVE-2026-107180
MI
MISP
MISP
7.1
0%
Oct 7MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances
CVE-2026-107175
MI
MISP
MISP
5.3
0%
Oct 7MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes
CVE-2026-106513
MI
MISP
MISP
6.9
1%
Oct 6MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change
CVE-2026-106512
SA
sachertortephp
MISP
8.4
0%
Oct 6MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS
CVE-2026-104914
MI
MISP
MISP
5.3
0%
Oct 2MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View
CVE-2026-104912
MI
MISP
MISP
7.1
0%
Oct 2MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data
CVE-2026-104910
MI
MISP
MISP
5.3
0%
Oct 2MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization
CVE-2026-104908
MI
MISP
MISP
7.1
0%
Oct 2MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging
CVE-2026-104907
MI
MISP
MISP
4.8
0%
Oct 2MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler
CVE-2026-104906
MI
MISP
MISP
6.2
0%
Oct 2MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output
CVE-2026-104901
MI
MISP
MISP
5.1
0%
Oct 2MISP ID Translator: Unescaped Remote Event ID Enables Cross-Site Scripting via Linked Server
CVE-2026-104900
MI
MISP
MISP
5.3
0%
Oct 2MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index
CVE-2026-103858
MI
MISP
MISP
5.3
0%
Oct 1MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions
CVE-2026-103664
MI
MISP
MISP
4.8
0%
Oct 1MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed Parameter
CVE-2026-103662
MI
MISP
MISP
5.1
0%
Oct 1MISP Reflected XSS in Taxonomy Tag Confirmation Forms
CVE-2026-103659
MI
MISP
MISP
7.1
0%
Oct 1MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes
CVE-2026-103655
MI
MISP
MISP
9.3
0%
Oct 1MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period
CVE-2026-103651
MI
MISP
MISP
7.6
0%
Oct 1MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass
CVE-2026-103389
MI
MISP
MISP
6.2
0%
Sep 30MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in Correlation Graph
CVE-2026-103388
MI
MISP
MISP
6.2
0%
Sep 30MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Field
CVE-2026-103321
MI
MISP
MISP
8.3
0%
Sep 30MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Image
CVE-2026-103239
MI
MISP
MISP
8.6
0%
Sep 30MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection
CVE-2026-103237
MI
MISP
MISP
8.3
0%
Sep 30MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Tenant Rows
CVE-2026-103235
MI
MISP
MISP
8.7
0%
Sep 30MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events
CVE-2026-97863
MI
misp-modules
misp
6.3
0%
Sep 25misp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute Values
CVE-2026-95806
MI
MISP
MISP
7.7
0%
Sep 22MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths
CVE-2026-95805
MI
MISP
MISP
5.3
0%
Sep 22MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction
CVE-2026-95754
MI
MISP
MISP
6.9
1%
Sep 22MISP: Disabled-user check ineffective in pre-authentication TOTP login branch
CVE-2026-95703
MI
MISP
MISP
5.1
1%
Sep 22MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name
CVE-2026-95701
MI
MISP
MISP
5.1
1%
Sep 22MISP Path Traversal via Organization Name in Org-Statistics Logo Check
CVE-2026-95698
MI
MISP
MISP
5.3
1%
Sep 22MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name
CVE-2026-95697
MI
MISP
MISP
5.3
0%
Sep 22MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata
CVE-2026-95693
MI
MISP
MISP
5.3
1%
Sep 22MISP Information Disclosure via Forged Upload Path
CVE-2026-95685
MI
MISP
MISP
5.3
0%
Sep 22MISP Missing Authorization on replaceSuggestionInReport Event Report Action
CVE-2026-95683
MI
MISP
MISP
5.3
0%
Sep 22MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL
CVE-2026-95682
MI
MISP
MISP
4.8
0%
Sep 22MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View
CVE-2026-95679
MI
MISP
MISP
6.9
1%
Sep 22MISP Unauthenticated Blind SSRF via XML Body Processing
CVE-2026-95674
MI
MISP
MISP
5.3
0%
Sep 22MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation
CVE-2026-95671
MI
MISP
MISP
5.3
0%
Sep 22MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add
CVE-2026-95667
MI
MISP
MISP
6.9
0%
Sep 22MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials
CVE-2026-95665
MI
MISP
MISP
5.1
1%
Sep 22MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON
CVE-2026-95661
MI
MISP
MISP
5.1
0%
Sep 22MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List
CVE-2026-95659
MI
MISP
MISP
4.8
0%
Sep 22MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread
CVE-2026-95658
MI
MISP
MISP
6.9
0%
Sep 22MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules
CVE-2026-94404
MI
MISP
MISP
7.1
0%
Sep 21MISP CSRF vulnerability allows unauthorized attribute modification
CVE-2026-94401
MI
MISP
MISP
8.3
0%
Sep 21MISP Arbitrary Local File Read and SSRF via MISP Export Upload
CVE-2026-94394
MI
MISP
MISP
6.3
0%
Sep 21MISP ObjectReferencesController: Granular Distribution and Sharing Group Restrictions Bypassed When Adding Object References